
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json)
Hash identifier: ttuED92Y2ZJfEHXVi/WDgLQIygaaiCwoe7ezTgBnwK0=
Subject key identifier: 57:7A:F9:F6:A1:46:1B:83:7E:E5:F3:B2:46:0A:E8:DD:D2:B8:98:E8
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
Manifest number: 2920
Signing time: Tue 28 Jul 2026 15:43:23 +0000
Manifest this update: Tue 28 Jul 2026 15:43:22 +0000
Manifest next update: Tue 04 Aug 2026 15:43:22 +0000
Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: lTfNXgF4wND4fFt4gM05sXaGUULcLSpuqs5MIAShpZ4=)
2: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: /ZeOnoGYWqCgohHT1TYAQRbpDcN3ZY5azA82GYZLfCI=)
3: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: z422r+0bSl4JOQTLZbDePZuu5kvTrdyMBLvSzmsZIos=)
4: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: THnuk88BmBSAnI45lh48WjXHbq0OqH6ZzkCu47KlOw0=)
5: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: DC/CiNTewEy9AjzNKO1rCpeeQC3b7v2RZLNf6CbyhHI=)
6: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b6hQv7rPPh2NoXSYCy1LQfz1KDKIPOQY1rtTl5hURj0=)
7: AB2AF04486EE11F19E006003A7EE528E.roa (hash: tYkGolBBO+H78+E2rvVmU5EKCzbGFp0Un19MVtD7J/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10806 (0x2a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Jul 28 15:43:22 2026 GMT
Not After : Aug 4 15:43:22 2026 GMT
Subject: CN=6a68ce1b-d72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:49:6a:ce:6a:a5:7f:a7:9f:50:3c:a6:e6:
24:a8:e9:e5:af:71:5b:11:9c:62:a9:c9:fc:e1:00:
a1:4b:8d:20:68:70:e4:23:95:fb:9c:07:cd:fb:51:
a9:aa:e7:60:22:38:aa:23:80:78:20:b1:2f:8b:69:
fa:89:9c:31:1d:29:ef:5a:59:1d:13:78:37:43:7f:
b9:f3:cc:95:09:1b:27:7a:71:31:ab:34:bc:de:ab:
0a:dd:96:dd:81:b9:f2:fc:25:92:51:47:52:1c:27:
59:5f:89:35:bf:e9:ee:26:87:63:c3:20:c8:0a:47:
9b:ef:4b:e7:c7:be:9f:70:1f:4b:13:0e:53:74:0a:
b9:a5:92:ce:40:e9:d2:47:fa:74:18:1a:56:b3:2c:
25:a3:36:52:b7:cc:68:90:d6:d5:08:ae:7c:be:7b:
3f:87:b5:73:a7:21:3c:12:00:64:df:97:d6:58:d9:
3c:1e:d5:e2:c8:4c:e2:18:87:46:f2:3a:4c:7e:0c:
2e:f1:e1:d0:ac:c5:be:12:b6:59:33:bf:b1:b8:9a:
c3:14:15:74:a3:dc:74:73:4a:06:fa:80:e3:4d:c9:
cf:4c:14:74:be:33:1f:77:bf:81:92:e6:38:dd:87:
1d:d0:e2:51:0e:ac:b4:b1:47:10:8e:54:d7:a0:e5:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:F9:F6:A1:46:1B:83:7E:E5:F3:B2:46:0A:E8:DD:D2:B8:98:E8
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:77:8a:a5:e8:a5:07:12:ae:83:b3:c0:01:e3:91:fe:cb:
34:e2:e8:1a:99:5a:0d:03:b0:29:47:ab:b4:b8:6c:15:5f:38:
59:3c:6c:5c:3a:2b:79:f2:c3:02:6c:57:72:86:c2:80:0c:71:
00:85:c9:1d:03:42:ed:db:79:f8:f6:6c:d3:9a:bd:2b:2d:90:
e8:fe:c5:14:60:79:c7:de:92:d7:b4:7a:da:7d:47:08:23:26:
28:11:92:34:34:c4:22:9c:1b:5a:0c:82:0f:d3:b4:02:62:8b:
93:b0:10:47:9b:e4:15:3c:7c:f5:76:d8:a1:71:4f:92:29:a2:
45:ce:4f:41:9d:58:a5:9d:e3:ef:21:ab:e8:96:5f:83:05:38:
e4:1f:94:0e:8b:da:b7:f4:27:c8:ac:1c:05:bc:cc:44:6a:73:
73:81:cd:c0:ed:55:b0:c2:d4:00:60:36:60:43:cd:a6:0b:40:
c3:51:f1:f8:39:a5:bd:1b:db:6c:c1:be:f0:70:a2:a9:b1:08:
22:90:23:0a:80:ab:7a:7d:da:d6:46:e3:99:c2:95:09:17:c4:
e7:de:00:48:09:12:26:c7:a3:86:d6:e3:05:70:aa:4d:c9:86:
19:7c:b5:ce:28:8c:bc:e2:f0:b6:bb:a8:e2:26:22:18:d7:78:
3e:23:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:12 2026 by rpki-client